Tag: 2025-11-13

2 Attack Reports | 150 Vulnerabilities

Attack reports

The terrible, horrible, no good, very bad day

On February 24, 2022, a cyberattack targeted Viasat's KA-SAT satellite network, exploiting a VPN vulnerability to access management systems. The attackers deployed AcidRain wiper malware, disrupting satellite communications for thousands of users in Ukraine and affecting 5,800 wind turbines in Germ…
ukraine
cyberattack
wiper
infrastructure
satellite
2025-11-13
acidrain
vpnfilter
vpn vulnerability
ka-sat
Published: November 13, 2025
Downloadable IOCs: 6

Unleashing the Kraken ransomware group

The Kraken ransomware group, emerging from the remnants of the HelloKitty cartel, has been observed conducting big-game hunting and double extortion attacks. Utilizing SMB vulnerabilities for initial access, they employ tools like Cloudflared for persistence and SSHFS for data exfiltration. Kraken'…
ransomware
encryption
cross-platform
data leak
russian-speaking
double extortion
2025-11-13
kraken
underground forum
Published: November 13, 2025
Downloadable IOCs: 11
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-36250

10.0
    Ibm
  • Aix
  • Vios
Published: November 13, 2025

CVE-2025-64709

9.6
    Typebot
  • Typebot
Published: November 13, 2025

CVE-2025-36251

9.6
    Ibm
  • Aix
  • Vios
Published: November 13, 2025

CVE-2025-59367

9.3
    Asus
  • Dsl Series Router
Published: November 13, 2025

CVE-2025-12762

9.1
    Pgadmin
  • Pgadmin
Published: November 13, 2025

CVE-2025-36096

9.0
    Ibm
  • Aix
  • Vios
Published: November 13, 2025

CVE-2025-11923

8.8
    Lifterlms
  • Lifterlms
Published: November 13, 2025

CVE-2025-12733

8.8
    Wordpress
  • Wp All Import
Published: November 13, 2025

CVE-2025-20341

8.8
    Cisco
  • Catalyst Center Virtual Appliance
Published: November 13, 2025

CVE-2025-60690

8.8
    Linksys
  • E1200 V2
  • Httpd
Published: November 13, 2025

CVE-2025-60691

8.8
    Linksys
  • E1200 V2
  • Httpd
Published: November 13, 2025

CVE-2025-43515

8.8
    Apple
  • Compressor
Published: November 13, 2025

CVE-2025-63406

8.8
    Intermesh
  • Groupoffice
Published: November 13, 2025

CVE-2025-60679

8.8
    Dlink
  • Dir-816a2
Published: November 13, 2025

CVE-2022-4984

8.7
    Zentao
  • Zentao Biz
  • Zentao Max
  • Zentao Open Source Edition
Published: November 13, 2025

CVE-2025-13130

8.5
    Radarr
  • Radarr
Published: November 13, 2025

CVE-2025-13131

8.5
    Sonarr
  • Sonarr
Published: November 13, 2025

CVE-2025-60692

8.4
    Cisco
  • Linksys E1200
Published: November 13, 2025

CVE-2025-60696

8.4
    Linksys
  • Re7000
Published: November 13, 2025

CVE-2025-36236

8.2
    Ibm
  • Aix
  • Vios
Published: November 13, 2025

CVE-2025-64741

8.1
    Zoom
  • Zoom Workplace
Published: November 13, 2025

CVE-2025-62484

8.1
    Zoom
  • Workplace Clients
Published: November 13, 2025

CVE-2025-59840

8.1
    Vega
  • Vega
Published: November 13, 2025

CVE-2025-46367

7.8
    Dell
  • Alienware Command Center
Published: November 13, 2025

CVE-2025-46369

7.8
    Dell
  • Alienware Command Center
Published: November 13, 2025

CVE-2025-12764

7.5
    Pgadmin
  • Pgadmin
Published: November 13, 2025

CVE-2025-12765

7.5
    Pgadmin
  • Pgadmin
Published: November 13, 2025

CVE-2025-64740

7.5
    Zoom
  • Workplace Vdi Client
Published: November 13, 2025

CVE-2025-60694

7.5
    Linksys
  • E1200
  • Httpd
Published: November 13, 2025

CVE-2025-47913

7.5
    Golang
  • Golang
Published: November 13, 2025

CVE-2025-64530

7.5
    Apollo
  • Federation
Published: November 13, 2025

CVE-2025-64511

7.4
    Maxkb
  • Maxkb
Published: November 13, 2025

CVE-2025-64717

7.4
    Zitadel
  • Zitadel
Published: November 13, 2025

CVE-2025-60697

7.3
    D-Link
  • Dir-882
  • Dir-882 Router
Published: November 13, 2025

CVE-2025-60698

7.3
    D-Link
  • Dir-882
  • Dir-882 Router
  • Firmware
Published: November 13, 2025

CVE-2025-64726

7.3
    Socket Firewall
  • Socket Firewall
Published: November 13, 2025

CVE-2025-12844

7.1
    Wordpress
  • Ai Engine
Published: November 13, 2025

CVE-2025-13121

6.9
    Cameasy
  • Liketea
Published: November 13, 2025

CVE-2025-12784

6.9
    Hp
  • Laserjet Pro Printer
  • Ldap Server
Published: November 13, 2025

CVE-2025-12785

6.9
    Hp
  • Laserjet Pro
Published: November 13, 2025

CVE-2025-13122

6.9
    Sourcecodester
  • Patients Waiting Area Queue Management System
Published: November 13, 2025

CVE-2025-12763

6.8
    Pgadmin
  • Pgadmin
Published: November 13, 2025

CVE-2025-11538

6.8
    Redhat
  • Keycloak
Published: November 13, 2025

CVE-2025-60674

6.8
    D-Link
  • Dir-878a1
Published: November 13, 2025

CVE-2025-55810

6.8
    Alaga
  • Home Security Wifi Camera
Published: November 13, 2025

CVE-2025-64752

6.8
    Grist
  • Grist-Core
Published: November 13, 2025

CVE-2025-30662

6.6
    Zoom
  • Workplace Vdi Plugin
Published: November 13, 2025

CVE-2025-46362

6.6
    Dell
  • Alienware Command Center
Published: November 13, 2025

CVE-2025-46368

6.6
    Dell
  • Alienware Command Center
Published: November 13, 2025

CVE-2025-4619

6.6
    Palo Alto Networks
  • Pan-Os
  • Pa-Series Firewall
  • Vm-Series Firewall
  • Prisma Access
Published: November 13, 2025

CVE-2025-12089

6.5
    Supsystic
  • Data Tables Generator
Published: November 13, 2025

CVE-2025-64259

6.5
    Theater For Wordpress
  • Theater For Wordpress
Published: November 13, 2025

CVE-2025-64261

6.5
    Codepeople
  • Appointment Booking Calendar
Published: November 13, 2025

CVE-2025-64262

6.5
    Ramon Fincken
  • Auto Prune Posts
Published: November 13, 2025

CVE-2025-64271

6.5
    Hasthemes
  • Wp-Plugin-Manager
Published: November 13, 2025

CVE-2025-64275

6.5
    Wpdevelop
  • Booking Manager
Published: November 13, 2025

CVE-2025-64380

6.5
    Woocommerce
  • Booster For Woocommerce
  • Woocommerce Jetpack
Published: November 13, 2025

CVE-2025-64383

6.5
    Qode
  • Qi Blocks
Published: November 13, 2025

CVE-2025-52186

6.5
    Lichess
  • Lila
Published: November 13, 2025

CVE-2025-60682

6.5
    Totolink
  • A720r Router
Published: November 13, 2025

CVE-2025-60683

6.5
    Totolink
  • A720r Router
Published: November 13, 2025

CVE-2025-60684

6.5
    Totolink
  • Lr1200gb
  • Nr1800x
Published: November 13, 2025

CVE-2025-60687

6.5
    Totolink
  • Lr1200gb Router
Published: November 13, 2025

CVE-2025-60688

6.5
    Totolink
  • Lr1200gb
  • Nr1800x
Published: November 13, 2025

CVE-2025-64525

6.5
    Astro
  • Astro
Published: November 13, 2025

CVE-2025-60693

6.5
    Linksys
  • E1200 V2
Published: November 13, 2025

CVE-2025-60700

6.5
    D-Link
  • Dir-882
Published: November 13, 2025

CVE-2025-60701

6.5
    D-Link
  • Dir-882
  • Dir-882 Firmware
Published: November 13, 2025

CVE-2025-60672

6.5
    D-Link
  • Dir-878a1
Published: November 13, 2025

CVE-2025-60673

6.5
    D-Link
  • Dir-878a1
Published: November 13, 2025

CVE-2025-60676

6.5
    D-Link
  • Dir-878a1
Published: November 13, 2025

CVE-2025-60699

6.5
    Totolink
  • A950rg
Published: November 13, 2025

CVE-2025-60702

6.5
    Totolink
  • A950rg Router
Published: November 13, 2025

CVE-2025-47222

6.5
    Keyfactor
  • Signserver
Published: November 13, 2025

CVE-2025-64748

6.5
    Directus
  • Directus
Published: November 13, 2025

CVE-2025-10295

6.4
    Wordpress
  • Angel Fashion Model Agency
Published: November 13, 2025

CVE-2025-11769

6.4
    Wordpress
  • Content Flipper
Published: November 13, 2025

CVE-2025-8397

6.4
    Wordpress
  • Save As Pdf Button
Published: November 13, 2025

CVE-2025-64703

6.3
    Maxkb
  • Maxkb
Published: November 13, 2025

CVE-2025-20349

6.3
    Cisco
  • Catalyst Center
Published: November 13, 2025

CVE-2025-20353

6.1
    Cisco
  • Catalyst Center
Published: November 13, 2025

CVE-2025-59480

6.1
    Mattermost
  • Mattermost Mobile Apps
Published: November 13, 2025

CVE-2025-64264

5.9
    Ninja-Forms
  • Popup-Addon-For-Ninja-Forms
Published: November 13, 2025

CVE-2025-12818

5.9
    Postgresql
  • Postgresql
Published: November 13, 2025

CVE-2025-60695

5.9
    Linksys
  • E7350
Published: November 13, 2025

CVE-2025-64714

5.8
    Privatebin
  • Privatebin
Published: November 13, 2025

CVE-2025-64747

5.5
    Directus
  • Directus
Published: November 13, 2025

CVE-2025-64263

5.4
    Pluginever
  • Wp Content Pilot
Published: November 13, 2025

CVE-2025-7704

5.4
    Supermicro
  • Bmc
Published: November 13, 2025

CVE-2025-60689

5.4
    Linksys
  • E1200
  • E1200 Firmware
Published: November 13, 2025

CVE-2025-60671

5.4
    D-Link
  • Dir-823g
Published: November 13, 2025

CVE-2025-60675

5.4
    D-Link
  • Dir-823g
  • Dir-823g Firmware
Published: November 13, 2025

CVE-2025-64710

5.3
    Bitplatform
  • Boilerplate
  • Webinteropapp
  • Webappinterop
Published: November 13, 2025

CVE-2025-12536

5.3
    Wordpress
  • Sureforms
Published: November 13, 2025

CVE-2025-12892

5.3
    Wordpress
  • Survey Maker
Published: November 13, 2025

CVE-2025-12979

5.3
    Welcart
  • Welcart E-Commerce
Published: November 13, 2025

CVE-2025-12891

5.3
    Wordpress
  • Survey Maker
Published: November 13, 2025

CVE-2025-12681

5.3
    Wordpress
  • Comment Edit Core
Published: November 13, 2025

CVE-2025-11260

5.3
    Wordpress
  • Wp Headless Cms Framework
Published: November 13, 2025

CVE-2025-64277

5.3
    Quantumcloud
  • Chatbot
Published: November 13, 2025

CVE-2025-64370

5.3
    Yop
  • Yop Poll
Published: November 13, 2025

CVE-2025-12377

5.3
    Wordpress
  • Envira Photo Gallery
Published: November 13, 2025

CVE-2025-13114

5.3
    Macrozheng
  • Mall-Swarm
Published: November 13, 2025

CVE-2025-13115

5.3
    Macrozheng
  • Mall-Swarm
Published: November 13, 2025

CVE-2025-13116

5.3
    Macrozheng
  • Mall-Swarm
Published: November 13, 2025

CVE-2025-41069

5.3
    T-Innova
  • Deborsite
Published: November 13, 2025

CVE-2025-13117

5.3
    Macrozheng
  • Mall-Swarm
Published: November 13, 2025

CVE-2025-13118

5.3
    Macrozheng
  • Mall-Swarm
Published: November 13, 2025

CVE-2025-13119

5.3
    Fabian Ros
  • Sourcecodester Simple E-Banking System
Published: November 13, 2025

CVE-2025-62483

5.3
    Zoom
  • Zoom
Published: November 13, 2025

CVE-2025-64718

5.3
    Js-Yaml
  • Js-Yaml
Published: November 13, 2025

CVE-2025-13123

5.3
    Amtt
  • Hotel Broadband Operation System
Published: November 13, 2025

CVE-2025-47220

5.3
    Keyfactor
  • Signserver
Published: November 13, 2025

CVE-2025-47221

5.3
    Keyfactor
  • Signserver
Published: November 13, 2025

CVE-2025-64753

5.3
    Grist
  • Grist-Core
Published: November 13, 2025

CVE-2025-64716

5.1
    Anubis
  • Anubis
Published: November 13, 2025

CVE-2025-40681

5.1
    Xcally
  • Omnichannel
Published: November 13, 2025

CVE-2025-60685

5.1
    Totolink
  • A720r Router
Published: November 13, 2025

CVE-2025-60686

5.1
    Totolink
  • A720r
  • Lr1200gb
  • Nr1800x
Published: November 13, 2025

CVE-2025-64738

5.0
    Zoom
  • Zoom Workplace
Published: November 13, 2025

CVE-2025-64706

5.0
    Typebot
  • Typebot
Published: November 13, 2025

CVE-2025-12620

4.9
    Wordpress
  • Plugin
Published: November 13, 2025

CVE-2025-30669

4.8
    Zoom
  • Zoom Clients
Published: November 13, 2025

CVE-2025-13120

4.8
    Mruby
  • Mruby
Published: November 13, 2025

CVE-2025-20355

4.7
    Cisco
  • Catalyst Center Virtual Appliance
Published: November 13, 2025

CVE-2025-64746

4.6
    Directus
  • Directus
Published: November 13, 2025

CVE-2025-12366

4.3
    Wordpress
  • Pagelayer
Published: November 13, 2025

CVE-2025-12015

4.3
    Quicq
  • Convert Webp And Avif
Published: November 13, 2025

CVE-2025-64265

4.3
    N-Media
  • Frontend File Manager
Published: November 13, 2025

CVE-2025-64267

4.3
    Wpswings
  • Woocommerce Ultimate Points And Rewards
Published: November 13, 2025

CVE-2025-64269

4.3
    Edgarrojas
  • Woo Pdf Invoice Builder
Published: November 13, 2025

CVE-2025-64274

4.3
    Wpkoi
  • Wpkoi Templates For Elementor
Published: November 13, 2025

CVE-2025-64379

4.3
    Woocommerce
  • Booster For Woocommerce
Published: November 13, 2025

CVE-2025-64382

4.3
    Webtoffee
  • Order Export And Order Import For Woocommerce
Published: November 13, 2025

CVE-2025-62482

4.3
    Zoom
  • Zoom Workplace
Published: November 13, 2025

CVE-2025-64739

4.3
    Zoom
  • Zoom Clients
Published: November 13, 2025

CVE-2025-20346

4.3
    Cisco
  • Catalyst Center
Published: November 13, 2025

CVE-2025-64749

4.3
    Directus
  • Directus
Published: November 13, 2025

CVE-2025-64711

3.9
    Privatebin
  • Privatebin
Published: November 13, 2025

CVE-2025-64744

3.5
    Openobserve
  • Openobserve
Published: November 13, 2025

CVE-2025-46370

3.3
    Dell
  • Alienware Command Center
Published: November 13, 2025

CVE-2025-12817

3.1
    Postgresql
  • Postgresql
Published: November 13, 2025

CVE-2025-11777

3.1
    Mattermost
  • Mattermost
Published: November 13, 2025

CVE-2025-64745

2.7
    Astro
  • Astro
Published: November 13, 2025

CVE-2025-64754

2.7
    Jitsi
  • Jitsi Meet
Published: November 13, 2025

CVE-2025-64276

None
    Ays
  • Pro Survey Maker
Published: November 13, 2025

CVE-2025-64292

None
    Pascalbajorat
  • Analytics Germanized For Google Analytics
Published: November 13, 2025

CVE-2025-64369

None
    Codepeople
  • Contact Form Email
Published: November 13, 2025

CVE-2025-64381

None
    Wpdevelop
  • Booking Calendar
Published: November 13, 2025

CVE-2025-64384

None
    Jetmonsters
  • Jetformbuilder
Published: November 13, 2025
Click here to see more Vulnerabilities